NewsThe Hacker News
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
More on Production
Other advisories
- HighCVE-2026-111399Eine SQL-Injection-Schwachstelle in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps ermöglicht SQL-Injection.
- Not ratedosv:CLEANSTART-2026-KM75633tgstation-server is a production scale tool for BYOND server management
- Not ratedosv:CVE-2026-109660Frappe ERPNext before 15.112.0 Missing Authorization in Production Record Endpoints
- Not ratedosv:CVE-2026-102596Nango: Production flow RBAC bypass on private flow-read routes
- Not ratedosv:CVE-2026-52903YAML safe_load production fallback to unsafe_load enables RCE via deserialization
- Not ratedosv:CLEANSTART-2026-XW68310OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages
- MediumCVE-2026-82935mH-DEVELOPER smart home module ships with an end-of-life, unsupported Debian 8 and Node.js runtime v17.0.1 in its production firmware. This exposes the devic…
- Not ratedosv:CVE-2026-61745InvenTree: Missing authorization on machine restart endpoint allows any authenticated user to interrupt production equipment
Other news entries
- The AI app builder your team trusts has a root-level backdoorNewsCSO Online
- Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AIEventThe Hacker News
- CISA tells operators to harden Siemens S7 PLCs. Here’s how to do it without disrupting productionNewsCSO Online
- BGP hijack infecting networks caused by a comedy of errors that’s not funny at allNewsArs Technica — Security
- When the patch tsunami meets the maintenance windowNewsCSO Online
- AI Speeds Up Malware Development, Not Its Success Rate: AnalysisNewsSecurityWeek
- Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/SecondNewsThe Hacker News
- Enterprise Defenses Recovered at the Edge and Collapsed InsideNewsThe Hacker News
Source: https://thehackernews.com/2026/10/an-ai-agent-found-critical-otp-bypass.html
ID